Lucene search
+L

262 matches found

Kitploit
Kitploit
added 2026/08/28 4:33 a.m.4 views

CVE-2026-6271

CVE-2026-6271 — Scanner RCE per il Plugin WordPress Career Section Plugin: Career Section career-section CVE ID: CVE-2026-6271 Punteggio CVSS: 9.8 Critical Vettore CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tipo di vulnerabilità: Unauthenticated Arbitrary File Upload → Remote Code Executi...

9.8CVSS5.9AI score0.00665EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 3:40 a.m.2 views

security-study-plan

Un piano di studio pratico per diventare un ingegnere di sicurezza informatica di successo basato su ruoli come Pentest, AppSec, Cloud Security, DevSecOps e così via con risorse gratuite/a pagamento, strumenti e concetti per eccellere. Coprirà, ma non solo: Completati 1. Competenze Comuni per il...

5.9AI score
SaveExploits0References30
Kitploit
Kitploit
added 2026/08/28 3:37 a.m.1 views

clair

Clair Note : The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries. Clair is an open source project for the static analysis of vulnerabilities in application containers currently including OCI...

5.6AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/27 12:53 a.m.6 views

Security_Engineer_Interview_Questions

SecurityEngineerInterviewQuestions Nella primavera del 2016 ho passato un paio d'ore a leggere Glassdoor.com per vedere quali domande di sicurezza gli utenti avevano riportato di aver ricevuto durante i colloqui per lavori da ingegnere della sicurezza. Ho annotato tutte quelle non duplicate ed ec...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 5:37 p.m.2 views

Cybersecurity-Mastery-Roadmap

🛡️ Roadmap Definitiva per la Padronanza della Cybersecurity Una guida completa e passo passo per padroneggiare la cybersecurity dal livello principiante a quello esperto, con risorse selezionate, strumenti e indicazioni di carriera 📋 Indice dei Contenuti Introduzione Come Usare Questa Roadmap...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/05 7:17 p.m.19 views

CVE-2026-6271

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.3AI score0.00665EPSS
SaveExploits1References1
Talos Blog
Talos Blog
added 2026/06/04 12:05 p.m.19 views

Winning the cyber marathon with Tony Giandomenico

In the high-speed world of cybersecurity, the difference between a breach and a breakthrough often comes down to endurance. Tony Giandomenico, Senior Director of Product Management with Cisco Talos, joins me to discuss how he balances the intensity of leading major product launches with the...

5.7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/26 5:52 a.m.141 views

Exploit for CVE-2026-6271

CVE-2026-6271 — Career Section WordPress Plugin RCE Scanner...

9.8CVSS5.8AI score0.00665EPSS
SaveExploits1
Patchstack
Patchstack
added 2026/05/14 9:48 a.m.18 views

WordPress Career Section plugin <= 1.7 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Paolo Tresso - Wordfence in WordPress Plugin Career Section versions = 1.7...

9.8CVSS5.8AI score0.00665EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2026/05/14 7:16 a.m.32 views

CVE-2026-6271

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS0.00665EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/05/14 6:44 a.m.11 views

CVE-2026-6271 Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00665EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/05/14 6:44 a.m.56 views

CVE-2026-6271 Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS0.00665EPSS
SaveExploits1References4
CVE
CVE
added 2026/05/14 6:44 a.m.41 views

CVE-2026-6271

The CVE-2026-6271 entry concerns the WordPress Career Section plugin (all versions up to 1.7) vulnerable to Arbitrary File Upload via the CV upload handler due to missing file type validation. Unauthenticated attackers can upload executable files, enabling remote code execution as described in th...

9.8CVSS6.4AI score0.00665EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/05/14 6:44 a.m.9 views

CVE-2026-6271

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00665EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/05/14 6:44 a.m.19 views

EUVD-2026-30253

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00665EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/05/14 12:00 a.m.44 views

PT-2026-40890

The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload handler. This is due to missing file type validation. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes...

9.8CVSS6.4AI score0.00665EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/05/14 12:00 a.m.20 views

WordPress plugin Career Section 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

9.8CVSS6.2AI score0.00665EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/04/16 9:31 a.m.9 views

EUVD-2025-209493

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the...

8.8CVSS5.7AI score0.00412EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/04/16 9:15 a.m.13 views

WordPress Career Section plugin <= 1.6 - Cross-Site Request Forgery to Arbitrary File Deletion vulnerability

Cross-Site Request Forgery to Arbitrary File Deletion vulnerability discovered by Ivan Cese in WordPress Plugin Career Section versions = 1.6...

8.8CVSS5.8AI score0.00412EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/04/16 8:16 a.m.10 views

CVE-2025-14868

The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to missing nonce validation and insufficient file path validation on the delete action in the...

8.8CVSS0.00412EPSS
SaveExploits0References2
Rows per page
Query Builder